Public Health Wales Health Protection Alpha

Description

Summary of work Public Health Wales have completed a discovery of user needs for health protection in Wales prior to selecting a minimum viable product for the digital aspect of its health protection services. The existing central system is called Tarian. In order to meet all user needs, this is used in conjunction with up to 41 other tools or systems. This package will be an Alpha which will prove the capability of at least one open source solution from the discovery, refine the Minimum Viable Product (MVP) and produce a scoped build/test/deliver plan for the selected route. The MVP should include a scalable case management system. The Alpha hypothesis is that PHW can use open-source, cloud-based software to meet the user needs. The Alpha will need to test this hypothesis to see if the suggested software solutions have: • the required functionality to meet the needs of users in Wales • the ability to integrate with the existing and future NHS Wales digital architecture, and • a stable and viable long-term community that PHW can join and contribute to Alongside the development of the MVP, the successful bidder will work with the team to produce a Full Business Case (FBC) for submission to Welsh Government that will clarify the amount of Capital and Revenue needed to deliver the full service on an on-going basis. The Alpha should include full documentation such as testing plans, training plans, implementation plans and stakeholder communication plans, all agreed by the programme board. Where the supplied staff will work Wales Where the supplied staff will work No specific location (for example they can work remotely) Why the work is being done The COVID-19 pandemic highlighted the gap between the needs of users during a major epidemic and the capacity of the existing digital health protection solution in Wales. One of the major indicators of this was the need to procure a solution to manage the communication with and tracing of infectious cases. As a result of the gap, PHW led a root and branch discovery into the user needs for health protection across Wales. The user needs identified cover both the NHS, central and local government, national and international partners and the citizens, employers and residents of Wales. We have identified at least one existing Free, Libre, Open-Source Software (FLOSS) solution that should meet the list of user needs, and would like to prove the hypothesis that this could meet the Welsh needs of delivering digital health protection alongside digital data protection. The work is needed in good time, as health protection cannot be planned in the same way as routine delivery. The business problem We need to have a digital Health Protection service to run alongside our specialists in case of health protection incidents or outbreaks, as well as to deliver excellent advice to those who need it Expected deliverables : • Proof that an existing FLOSS product can meet the needs of our users OR proof that none can. • A full business case for the implementation phase • Documented specifications for the minimum viable product • Documentation and agreement in principle for integrations with key external systems • Green delivery confidence for the programme’s next phase • Users have a good understanding of the existing work ad work to be done next. The work should be completed through mixed teams, with partners and Public Health Wales teams working alongside each other to deliver. The work and deliverables should, where necessary, meet the Welsh digital service standards, and we should be meeting the principles laid out in the Public Health Wales digital and data strategy. Although we do not specifically require individuals to be security checked, we expect all members of our partner team to have undergone appropriate checks and training within their organisation. Our partners must hold either ISO27001 or Cyber Essentials Plus certification. They will also need to apply for a code of connection to NHS Wales and work closely with us to ensure the safety and protection of sensitive information throughout our partnership. The people who will use the product or service User type: Citizen Definition: As a citizen I need to know I’ve been confirmed, suspected to have or been exposed to a notifiable disease, and what I should do User type: Citizen Definition: As a citizen I need to know if I’ve been exposed to an environmental health incident, and what to do. User type: Notifier Definition: As a notifier I need to alert the Health Protection service of a notifiable disease or an environmental hazard event, so that the right actions can be taken. User type: Lab worker Definition: As a lab worker, I need to test samples and get results to the health protection teams so that they can take the appropriate action. User type: Case worker/Tracer Definition: As a tracer I need to be able to contact confirmed or suspected cases so that I can inform them of what they need to do now. User type: Internal Administrator Definition: As an internal administrator I need to maintain and configure the systems and develop them based on new needs, so that the service meets the needs of other users. User type: Data diver Definition: As a data diver I need to create, monitor and use reports and dashboards to provide intelligence for planning, policy and response coordination. Work done so far A discovery has been completed. The summary is included and a full set will be provided to shortlisted bidders Which phase the project is in Alpha Existing team Dr Giri Shankar, Director of Health Protection – Senior business owner Wendi Shepherd,Richard Firth, Chris Williams – business owners Fliss Bennee, Head of Data – programme SRO Health Protection programme manager – recruitment ongoing Chris Ollier – technical lead for digital and data services Address where the work will be done We expect working will be hybrid and mostly remote, but for in person meetings we nominate Number 2 Capital Quarter 3rd Floor Tyndall Street Cardiff Working arrangements Our partners are welcome to work alongside us in our offices if they are based nearby. Otherwise we expect the majority of the work to be able to be done remotely, with face to face sessions to be agreed during onboarding. Typically we might want to meet in person for our inception, where we can also arrange handover of hardware and agree ways of working through our sprints. Travel and subsistence should be included in the bid. Security and vetting requirements Baseline Personnel Security Standard (BPSS) Security and vetting requirements Counter Terrorist Check (CTC) More information about the Security requirements: Team members working with PII should have BPSS, and ideally CTC. Team members not working directly with Personally Identifiable Information or security architecture and protocols should have BPSS if possible Latest start date 20 August 2024 Expected contract length Contract length: 0 years 5 months 0 days Optional extension: 0 years 2 months 0 days Budget Indicative maximum: £250000 Indicative minimum: The contract value is not specified by the buyer Further information: This is the maximum envelope for spend, inclusive of VAT Contracted out service or supply of resource? Contracted out service: the off-payroll rules do not apply